NoScript 10 + New Version Releases

Beta 10.1.6.6rc2 has been released.

v 10.1.6.6rc2
=============================================================
+ Tab selection persistence on Options Page reloads
+ Automatically close Options Page on popup UI permissions
changes to avoid inconsistencies / unresponsiveness
x Fixed regression: per-sites permissions list not updated
after addition (thanks bo elam for report)

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.6rc2

Bo

 

Beta 10.1.7rc1 has been released.

v 10.1.7rc1
=============================================================
+ WebGL blocking now honored on scripted pages
x Quantum RC versions are hosted on secure.informaction.com
from now on due to beta channel deprecation on AMO

https://noscript.net/getit#devel

Bo

 

Does this version supports clearjacking? How to enable it?

Thanks

 

ClearClick is not available yet in version 10. The protection will be reintroduced probably soon.

Bo

 

Yup. Should be ClearClick

Thanks

 

Beta 10.1.7rc2 is out.

v 10.1.7rc2
=============================================================
+ "Appearance>List full addresses in the permissions popup"
option, off by default, to simplify the popup UI
+ "webgl" requirement feedback in CUSTOM permissions
+ "webgl" placeholder wherever possible
+ Activated beta channel updates from secure.informaction.com

https://noscript.net/getit#devel

Bo

 

Version 10.1.7 has been released. Changes and fixes below.

v 10.1.7
=============================================================
x "Needed type" feedback in Custom preset for data: and blob:
fonts (thanks skriptimaahinen for report)
+ Pressing DEL while left-mousing down on a fixed/absolutely
positioned element of a script-disabled page removes it,
allowing users to dismiss in-content popup "windows" and
blocking overlays
x Fixed changing sites permission resets local preferences
regression from 10.1.7rc1 (thanks pal1000 for report)
x Fixed data: and blob: fonts not blocked even if the "font"
permission is not given to the main document (thanks
skriptimaahinen for report and preliminary patch)
+ "Appearance|List full addresses in the permissions popup"
option, off by default, to simplify the popup UI
+ "webgl" requirement feedback in CUSTOM permissions
+ "webgl" placeholder wherever possible
+ Activated beta channel updates from secure.informaction.com
+ WebGL blocking now honored on scripted pages
x Quantum RC versions are hosted on secure.informaction.com
from now on due to beta channel deprecation on AMO

https://addons.mozilla.org/en-US/firefox/addon/noscript/

Bo

 

Also, beta 10.1.7rc4 has been released.

v 10.1.7rc4
=============================================================
x "Needed type" feedback in Custom preset for data: and blob:
fonts (thanks skriptimaahinen for report)

https://noscript.net/getit#devel

Bo

 

FWIW ~ since v10.1.7 release (Fx 59.0), I need to occasionally refresh pages.
Default & Untrusted = no checks

Edit: trialing Trusted w all boxes check'd.

 

Hi bjm, if I click Temporarily allow all this page, the page refreshes automatically. If I click to Temporarily allow a domain or domains, the page doesn't automatically refreshes. Thats the expected behavior. I am using beta 10.1.7rc4.

I have my Presets set as you have them.

Bo

 

I doubt you ll notice any difference in any site that's important to you.

Bo

 

page load occasional observe, for me, with webgl and other not checked, since v10.1.7 &or Fx59.0
for example

page refresh sorts page anomaly
and with all boxes check'd, page load feels, better. I'll monitor.
No biggy. Just my observe.

 

bjm, perhaps I am not understanding what you mean. I am not getting the message by looking at the picture (sorry). Or noticing anything regarding reloading but if you are, report it at the NoScript forum.

In 10.1.7 there are changes for WebGl so maybe that changes something for you, I dont know. For me, the changes changed nothing as I have been disabling WebGl in about:config for years.

Bo

 

#287 pic is an example of page presentation with anomaly, not as expected......mini-profile as expected is a left margin vertical column.

 

This is what I see, bj. Important: Other than NoScript, I am not using any other content blocker. So, no conflict with another extension.



Bo

 

Okay, just me. Thanks

with page refresh

I was thinking since v10.1.7 &or Fx59.0
I'll monitor. Thanks

 

Yes, I think its only you. I just tested, 1.Enabled webgl in about:config and 2. Ticked webgl for Trusted in NoScript Options. I see no anomalies whatsoever.

Perhaps you should test with a new Firefox profile, and Only install NoScript.

Likely, another extension is conflicting with NoScript and produces what you are seeing.

Bo

 

Okay. I'll try 10.1.6.5.
Just had this with 10.1.7.

 

I am not seeing what you see. I still think your best test is a new Firefox profile, and install NoScript. You can start with 10.1.6.5 and move up to latest beta.

Bo

 

10.1.6.5 seems okay, so far, on my setup. I'm not beta testing NoScript.
Thanks

 

NoScript v10.1.7.2 (March 16, 2018)

 

10.1.7.2 seems okay, so far, on my setup.
Firefox 59.0.1 (64-bit)
Performance = Use recommended

 

Version 10.1.7.3 has been released.

v 10.1.7.3
=============================================================
x Fixed infinite script count report loops on some sites
(thanks AuntyJack, @ALoss2 and others for reporting)
x Fixed localhost not being recognized as a domain (thanks
skriptimaahinen for patch)
x Fixed regression causing NOSCRIPT element and META refreshes
not to be emulated anymore on script-disabled pages (thanks
barbaz and fatboy for reporting)

https://addons.mozilla.org/en-US/firefox/addon/noscript/

Bo

 

Also, beta 10.1.7.3rc1.

v 10.1.7.3rc1
=============================================================
x Fixed infinite script count report loops on some sites
(thanks AuntyJack, @ALoss2 and others for reporting)
x Fixed localhost not being recognized as a domain (thanks
skriptimaahinen for patch)
x Fixed regression causing NOSCRIPT element and META refreshes
not to be emulated anymore on script-disabled pages (thanks
barbaz and fatboy for reporting)

https://noscript.net/getit#devel

Bo

 

NoScript v10.1.7.4 (March 22, 2018)

Spoiler: Version History v10.1.7.4

v 10.1.7.4
=============================================================
x Fixed script enablement status not correctly detected on
some pages rolling their own CSP (causing NOSCRIPT element
and META refresh emulation not to be triggered)
x Fixed "Appearance" NoScript Options tab missing on Android
x [XSS] Fixed semicolon-separated JSON payloads DDOSing the
JSON-optimizer, e.g. with syndication.twitter.com subframes
(thanks KonomiKitten and pal1000 for reports)
x [UI] Renamed "Scripts globally allowed (dangerous)" option
to "No permissions enforcement (dangerous)" to better
reflect its actual effect
x [UI] Better feedback about "No permission enforcement" by
disabling the "Preset customization" section and and the
"Per-site Permissions" tab
x [UI] Moved XSS-related options to the "Advanced" tab
x Fixed disabled webgl breaking feeds on script-enabled sites
(thanks pal1000 for reporting)
x Enhanced dynamic script injection if browser.contentScripts
API is available
x Expanded support for webgl canvas placeholders